On the statistical properties of the isolation forest anomaly detection method - Archive ouverte HAL
Pré-Publication, Document De Travail Année : 2024

On the statistical properties of the isolation forest anomaly detection method

Résumé

Isolation forest is a popular method for anomaly detection introduced in Liu et al. (2008, 2012). Nonetheless, its statistical properties are little understood. We study the scoring function that is induced by the isolation forest over a finite sample at the limit when the number of trees tends to infinity, based on an analytical expression that we derive. The isolation forest method is proved to be effective at detecting geometrically isolated points within a finite sample. We then study the large sample limit of the scoring function in random designs as well as in sequences of regular designs and we find that the isolation forest method performs as a detector of the support of the underlying distribution. We also find that dense clustered anomalies are not detected asymptotically by the isolation forest method, a phenomenon known as the masking effect, but that isolation forest anomaly detection is robust to training with normal data sparsely contaminated by anomalies. Numerical examples are provided that confirm the theoretical results.
Fichier principal
Vignette du fichier
bp-isolation-v2.pdf (613.57 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04430185 , version 1 (31-01-2024)
hal-04430185 , version 2 (18-07-2024)

Identifiants

  • HAL Id : hal-04430185 , version 2

Citer

Bruno Pelletier. On the statistical properties of the isolation forest anomaly detection method. 2024. ⟨hal-04430185v2⟩
286 Consultations
122 Téléchargements

Partager

More